Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/B0Nzi0KPmBzsRwCcaOQTr4IZj3c.roa
File: B0Nzi0KPmBzsRwCcaOQTr4IZj3c.roa (raw, json)
Hash identifier: M9IO9N8Wvl4kyq0u6m4e8M0Rst08DkHbpdIjVsY0XC8=
Subject key identifier: 07:43:73:8B:42:8F:98:1C:EC:47:00:9C:68:E4:13:AF:82:19:8F:77
Certificate issuer: /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial: 01A158BD16E6D8A95150CDA6D50E1DEC39CA
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/B0Nzi0KPmBzsRwCcaOQTr4IZj3c.roa
Signing time: Tue 20 Oct 2026 09:55:49 +0000
ROA not before: Tue 20 Oct 2026 09:55:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199496
IP address blocks: 185.132.140.0/22 maxlen: 24
185.132.141.0/24 maxlen: 24
185.132.142.0/23 maxlen: 23
185.132.143.0/24 maxlen: 24
185.183.19.0/24 maxlen: 24
2a06:e240::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:bd:16:e6:d8:a9:51:50:cd:a6:d5:0e:1d:ec:39:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Validity
Not Before: Oct 20 09:55:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0743738b428f981cec47009c68e413af82198f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:f0:e8:9e:1f:b5:c5:1b:41:87:b4:0b:fc:
98:e1:76:82:4b:18:89:6e:4d:b3:ef:25:66:fb:69:
53:4c:8c:e9:0c:13:18:52:6f:ea:fa:8d:d9:ff:40:
7a:e4:52:2f:bd:1c:f1:00:88:e3:ec:0c:46:82:b5:
8e:56:55:a0:8b:36:0d:0a:e0:ba:62:a4:36:8c:72:
05:40:cd:ac:1f:bb:4b:12:41:20:9a:99:0a:c3:18:
2d:12:fa:6c:ea:19:6b:14:92:26:0c:ff:34:f0:38:
30:5b:3d:93:bd:d4:cf:e6:d0:67:02:48:e2:56:7c:
17:a9:ad:13:8a:8b:01:62:15:1c:a9:e5:5e:cc:8b:
55:10:42:57:2a:15:ae:76:1b:12:9b:2b:f1:29:1f:
0b:20:c4:c4:db:9d:ec:91:57:52:b0:e9:c4:a8:e7:
d2:2e:7d:26:bd:22:0d:f2:a9:02:ac:9e:35:71:85:
3c:c9:cc:2d:51:1b:e7:c5:58:fc:7f:e9:aa:9a:67:
7e:67:db:b5:43:31:db:8e:9b:af:18:64:65:c6:b2:
a4:7b:5c:a8:05:cd:ab:ab:56:c3:33:66:c1:78:d9:
db:42:06:b8:32:32:db:59:56:76:bd:df:c7:73:9d:
88:65:6a:7a:15:88:d7:3e:43:ca:8e:b1:7d:39:b6:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:43:73:8B:42:8F:98:1C:EC:47:00:9C:68:E4:13:AF:82:19:8F:77
X509v3 Authority Key Identifier:
keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/B0Nzi0KPmBzsRwCcaOQTr4IZj3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.140.0/22
185.183.19.0/24
IPv6:
2a06:e240::/29
Signature Algorithm: sha256WithRSAEncryption
b7:af:bb:c4:f8:75:78:aa:1b:78:ec:ae:7f:32:8d:0b:30:55:
1f:58:02:3b:17:e0:0b:43:9f:b2:71:72:7d:67:bc:fd:53:de:
4d:0d:79:47:94:64:66:f1:bf:a2:99:0a:80:e7:04:5e:0a:2f:
be:f9:67:2c:ea:52:fa:fc:e3:f6:86:46:0d:9d:df:68:ed:bf:
1e:0a:d0:28:bc:d3:1c:48:1c:6c:15:5f:56:52:8b:62:21:77:
65:81:90:8a:fd:cb:7d:55:46:c6:2b:af:63:9f:c4:12:a7:0c:
12:df:07:99:b7:9c:49:c7:b8:71:32:33:d9:f7:38:40:43:1c:
e9:2e:9a:f2:51:06:40:75:0c:6b:0d:f7:d1:e3:5a:f5:a9:9c:
9f:2d:f5:97:09:f4:68:d0:28:41:80:a3:5c:01:fa:20:81:39:
0a:c3:3e:a2:35:9b:b9:38:70:33:5a:7a:fe:d7:1d:bf:d0:5d:
c4:36:fd:be:64:bd:13:b0:cc:83:07:12:fb:67:f8:70:97:9c:
46:bf:61:31:43:03:82:39:51:11:92:cc:01:9c:03:5d:73:85:
2c:cb:5b:6e:7c:63:31:6f:b5:c6:5c:47:03:c3:f3:f5:d0:5a:
8b:ab:68:b0:88:77:df:df:5a:24:2e:8b:bc:27:53:32:61:f5:
03:ec:20:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:10:51 2026 by rpki-client